

Custom controls, like the Duo custom control for Azure CA, cannot satisfy a CA rule that requires "multifactor".


Microsoft does not evaluate authentication with a custom control as part of a Conditional Access multifactor authentication claim requirement. Azure Custom Control Limitations MFA Requirement Excludes Custom Controls Please review Microsoft's Azure Conditional Access documentation before configuring Duo authentication in your Azure Active Directory tenant. Verify your Microsoft subscription features before proceeding. Conditional Access with third-party MFA custom controls requires an Azure Active Directory Premium P1 or P2 subscription.
